VMWare Escape Publicized at SANSfire 2007
ED: But ... u have to be able to dll inject on the host, on the Workstation, *no* ESX
http://www.foolmoon.net/cgi-bin/blog/index.cgi?mode=viewone&blog=1185593255